Siemens Sidis Secured Smartplug vulnerabilities

3 CVEs affecting Siemens Sidis Secured Smartplug, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9232, published 2025-09-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9231, published 2025-09-30. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing…
CVE-2025-9232, published 2025-09-30. Medium severity, CVSS 5.9. EPSS: 2% chance of exploitation in the next 30 days. Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority…
CVE-2025-9230, published 2025-09-30. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may…